$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer File: A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer (raw, json) Hash identifier: Joae7OSaMij9ujW8fd9LV63O94IvNuza98cxQUexGA0= Subject key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6FBD844B03F94995776DE2DE52D8EC72E2899129 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft caRepository: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 18:03:51 +0000 Certificate not after: Mon 22 Sep 2025 18:08:51 +0000 Subordinate resources: AS: 271180 IP: 200.0.64.0/24 IP: 200.125.129.0/24 IP: 2804:7778::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bd:84:4b:03:f9:49:95:77:6d:e2:de:52:d8:ec:72:e2:89:91:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 18:03:51 2024 GMT Not After : Sep 22 18:08:51 2025 GMT Subject: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:27:09:b0:3a:99:8f:4e:9a:aa:45:c5:9b:b8: d0:81:35:90:3e:1c:76:0d:20:90:cd:50:ec:9b:25: e1:14:64:db:6b:80:e0:10:ed:fd:35:1c:77:c4:8c: 3c:0c:82:26:9f:32:31:24:85:69:54:d4:61:02:dd: 3e:72:1d:13:90:2f:30:9a:f8:85:80:bb:b4:ce:3a: 15:3b:14:db:0a:9e:23:64:5e:3c:8c:1a:c3:5d:7f: 7a:43:b8:b0:3f:fa:e1:95:c8:77:fa:55:bc:a0:70: 3a:a0:58:2e:3e:96:58:e0:b5:a5:8c:a6:5a:b6:8b: fb:25:ed:6d:17:7b:bb:8a:8d:be:66:dd:06:5e:9d: 55:12:63:3a:90:99:a5:bc:37:46:5e:a1:59:7d:bb: 1a:c7:71:a4:92:e8:56:93:66:5c:19:46:e5:94:df: 3c:dd:94:19:4a:c7:28:e6:43:3f:8c:63:e1:c2:c2: 34:4a:21:da:19:f4:d0:9e:26:e8:55:69:19:ec:9c: ee:cb:24:41:1d:81:bd:b8:1a:7c:24:c7:b1:7f:93: 91:2e:54:73:3f:11:fd:5b:24:d7:51:7d:87:85:e2: 5c:b0:2c:2d:99:99:00:5f:cd:c5:db:48:20:4b:26: 4f:1d:24:e1:92:ce:09:0b:25:ce:87:6c:dc:11:7f: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.64.0/24 200.125.129.0/24 IPv6: 2804:7778::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271180 Signature Algorithm: sha256WithRSAEncryption 9e:93:11:e7:6f:71:d2:31:47:38:16:54:b4:ea:52:c5:d4:54: 5f:35:ed:c7:ce:cd:63:d2:98:cd:78:a8:0a:d9:ba:6b:14:6a: 9e:b5:4f:b3:60:58:85:24:3c:78:c1:cd:d2:2a:e7:44:19:9a: 18:d9:3a:70:3d:8d:86:29:c3:31:05:54:ad:5e:5f:03:29:ae: 8a:84:4d:ed:04:86:d0:11:44:1e:2e:1a:03:69:71:ca:2c:90: b1:28:a3:4a:fe:e9:43:aa:1c:e0:3e:16:95:d9:5c:f0:d0:55: 7c:13:e3:84:89:ea:b2:30:0a:5d:ac:b3:f7:23:fa:33:fa:6c: 63:8d:4f:52:16:c6:f5:ed:88:21:05:1b:1a:7c:e4:7e:c0:45: 08:00:6d:aa:31:4f:3b:98:ff:e3:9a:92:cf:2f:18:3c:82:df: 07:ec:18:a4:ea:45:ec:1d:2c:35:b9:db:46:91:9f:9a:d9:ed: 77:af:4a:7e:18:c9:5d:b9:58:55:79:d7:d9:c3:bb:3f:41:b7: 46:df:2a:78:51:09:a8:dc:ac:32:0a:37:2d:17:d9:d6:f4:ed: 43:90:fd:15:6f:b6:c0:0b:1e:26:1b:10:37:eb:47:a1:cc:a5: 2f:7e:95:dd:9b:01:d7:41:bf:18:6b:81:70:d4:92:ff:b0:c9: 61:8a:3a:a1 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUb72ESwP5SZV3beLeUtjscuKJkSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjMxODAzNTFaFw0yNTA5MjIxODA4NTFaMDMxMTAvBgNV BAMTKEE4QkFGNTZEQTkxOTBBNUJGNUE5NkRGOEVBQjBGREI5MEQzRjM3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJwmwOpmPTpqqRcWbuNCBNZA+ HHYNIJDNUOybJeEUZNtrgOAQ7f01HHfEjDwMgiafMjEkhWlU1GEC3T5yHROQLzCa +IWAu7TOOhU7FNsKniNkXjyMGsNdf3pDuLA/+uGVyHf6VbygcDqgWC4+lljgtaWM plq2i/sl7W0Xe7uKjb5m3QZenVUSYzqQmaW8N0ZeoVl9uxrHcaSS6FaTZlwZRuWU 3zzdlBlKxyjmQz+MY+HCwjRKIdoZ9NCeJuhVaRnsnO7LJEEdgb24Gnwkx7F/k5Eu VHM/Ef1bJNdRfYeF4lywLC2ZmQBfzcXbSCBLJk8dJOGSzgkLJc6HbNwRf6kLAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSouvVtqRkKW/Wp bfjqsP25DT83XTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhk S3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhk S3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMi9BOEJB RjU2REE5MTkwQTVCRjVBOTZERjhFQUIwRkRCOTBEM0YzNzVELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBADIAEADBADIfYEwDQQCAAIwBwMFACgEd3gwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCNMMA0GCSqGSIb3DQEBCwUAA4IBAQCekxHnb3HS MUc4FlS06lLF1FRfNe3Hzs1j0pjNeKgK2bprFGqetU+zYFiFJDx4wc3SKudEGZoY 2TpwPY2GKcMxBVStXl8DKa6KhE3tBIbQEUQeLhoDaXHKLJCxKKNK/ulDqhzgPhaV 2Vzw0FV8E+OEieqyMApdrLP3I/oz+mxjjU9SFsb17YghBRsafOR+wEUIAG2qMU87 mP/jmpLPLxg8gt8H7Bik6kXsHSw1udtGkZ+a2e13r0p+GMlduVhVedfZw7s/QbdG 3yp4UQmo3KwyCjctF9nW9O1DkP0Vb7bACx4mGxA360ehzKUvfpXdmwHXQb8Ya4Fw 1JL/sMlhijqh -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:10 2025 by rpki-client